PT-2023-3844 · Microsoft · Windows Failover Cluster+1

K0Shl · Published 2023-07-11 · Updated 2024-05-29 · CVE-2023-32083

Positive Technologies (AI Summary)

CVSS v2.0

7.7

High

Base vector

AV:N/AC:L/Au:M/C:C/I:N/A:C

Name of the Vulnerable Software and Affected Versions Windows Failover Cluster (affected versions not specified)

Description The issue is related to information disclosure in the Failover Cluster component of Windows operating systems. It allows a remote attacker to gain unauthorized access to protected information. This can enable the attacker to obtain sensitive information and potentially affect the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Heap Based Buffer Overflow

Weakness Enumeration

CWE-200

CWE-122

Related Identifiers

BDU:2023-04136

CVE-2023-32083

Affected Products

Windows

Windows Failover Cluster

References · 7

• https://bdu.fstec.ru/vul/2023-04136 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2023-32083 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-32083 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32083 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32083 · Security Note
• https://cybersecurity-help.cz/vdb/SB2023071242 · Note
• https://vuldb.com/?id.233617 · Note